Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: 72K4jV3Cn8lworybQcgmQruzJlUI9WYtaVUpAik58Fs=
Subject key identifier: E0:32:85:B2:CC:88:43:AD:A0:85:F1:4A:49:38:F6:CF:45:B9:CF:AE
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 019897B798A0A36985A3E6AB1E269E1050DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 162F
Signing time: Mon 11 Aug 2025 06:00:48 +0000
Manifest this update: Mon 11 Aug 2025 06:00:48 +0000
Manifest next update: Tue 12 Aug 2025 06:00:48 +0000
Files and hashes: 1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=)
2: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=)
3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: /Zcq4KyOSTl5c8AgkXGw41l3pD9xhQO8i/nCMoigY38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:98:a0:a3:69:85:a3:e6:ab:1e:26:9e:10:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Aug 11 06:00:48 2025 GMT
Not After : Aug 12 06:00:48 2025 GMT
Subject: CN=e03285b2cc8843ada085f14a4938f6cf45b9cfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:3c:38:e3:12:b9:0f:52:73:1c:8b:59:ae:
af:3a:53:42:8e:9e:08:aa:af:d8:91:0f:6e:8e:e5:
e2:88:8f:6c:d9:e9:aa:d7:87:b5:62:8e:e8:4d:89:
7e:64:f3:94:89:93:c0:a0:75:f5:7f:73:f2:38:09:
f5:3e:f7:bf:8c:60:b5:5d:fe:06:d5:f2:2c:f8:8a:
c1:69:f1:28:30:19:c2:19:c6:6d:05:d8:13:d4:94:
00:0d:ef:85:1f:98:85:e6:52:42:8f:76:13:78:f6:
e7:ba:19:51:d7:d0:9a:ca:2d:20:54:e7:e9:2c:dd:
0a:c2:8f:ba:32:32:b2:ff:a9:68:83:38:33:95:30:
18:f8:1f:8e:4c:bf:01:a4:71:9b:ee:3b:1d:fd:e0:
b3:f1:b9:c7:b5:7f:66:71:e0:62:8f:57:d8:8c:33:
ef:f1:1c:71:fa:8a:46:8b:a9:20:c2:8c:f8:7c:5b:
b9:bb:14:47:1f:22:b6:9f:d7:a6:0a:fe:46:31:f6:
fc:fe:fd:df:41:db:12:57:39:4b:bc:f9:3a:59:91:
a0:51:e8:d0:98:b7:88:ef:dd:44:ee:f3:b0:11:4a:
50:2d:10:aa:fe:fb:43:86:08:42:ed:25:72:d4:8c:
7f:e8:45:b8:df:f2:60:51:bd:a6:25:43:99:95:e9:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:32:85:B2:CC:88:43:AD:A0:85:F1:4A:49:38:F6:CF:45:B9:CF:AE
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:84:eb:f1:a1:f1:2c:b0:a7:78:1b:ff:b6:1f:57:8c:ab:80:
c0:6d:4b:85:e6:c3:7e:29:b6:73:d0:91:bb:e1:76:f1:dc:41:
ba:8f:a4:6b:f4:b1:7f:5c:da:79:cc:c2:1b:05:bb:2c:94:82:
0a:1d:95:8b:0f:0c:0c:67:3e:29:7a:28:f5:48:2b:f1:06:2e:
28:54:8e:58:e7:9e:88:9c:6d:96:87:3e:ef:87:24:95:7e:e1:
ff:48:34:68:35:4e:17:a9:8c:d6:0c:dc:8c:94:c5:55:32:d3:
2d:4e:da:db:d5:91:b4:43:8e:4d:5d:a8:58:97:b6:39:e8:4d:
b7:f3:d1:6c:a1:e6:f6:a2:57:63:1e:1b:9b:bd:61:d8:ad:23:
09:51:80:c2:65:fe:27:f3:66:48:0e:f5:05:52:f2:de:83:21:
49:f1:2f:87:70:bf:ed:f1:a5:95:f3:a4:68:85:d3:67:d2:bd:
7e:e7:40:5c:77:68:69:0a:35:06:20:61:71:7d:44:75:c8:48:
e2:31:62:6e:12:83:f2:ff:a6:32:7b:74:b4:83:d5:9c:57:4e:
27:22:12:42:7e:45:87:27:25:39:3d:8f:39:40:f1:dc:d6:00:
ce:4f:58:6e:58:66:12:aa:21:ec:a4:38:10:0f:3d:7a:0e:33:
fa:71:63:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXt5igo2mFo+arHiaeEFDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy
NDkxYzUwHhcNMjUwODExMDYwMDQ4WhcNMjUwODEyMDYwMDQ4WjAzMTEwLwYDVQQD
EyhlMDMyODViMmNjODg0M2FkYTA4NWYxNGE0OTM4ZjZjZjQ1YjljZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvE8OOMSuQ9ScxyLWa6vOlNCjp4I
qq/YkQ9ujuXiiI9s2emq14e1Yo7oTYl+ZPOUiZPAoHX1f3PyOAn1Pve/jGC1Xf4G
1fIs+IrBafEoMBnCGcZtBdgT1JQADe+FH5iF5lJCj3YTePbnuhlR19Cayi0gVOfp
LN0Kwo+6MjKy/6logzgzlTAY+B+OTL8BpHGb7jsd/eCz8bnHtX9mceBij1fYjDPv
8Rxx+opGi6kgwoz4fFu5uxRHHyK2n9emCv5GMfb8/v3fQdsSVzlLvPk6WZGgUejQ
mLeI791E7vOwEUpQLRCq/vtDhghC7SVy1Ix/6EW43/JgUb2mJUOZlekVVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAyhbLMiEOtoIXxSkk49s9Fuc+uMB8GA1UdIwQY
MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt
MWM4YWZkMTlmZGJiLzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi
LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4Tr8aHx
LLCneBv/th9XjKuAwG1LhebDfim2c9CRu+F28dxBuo+ka/Sxf1zaeczCGwW7LJSC
Ch2Viw8MDGc+KXoo9Ugr8QYuKFSOWOeeiJxtloc+74cklX7h/0g0aDVOF6mM1gzc
jJTFVTLTLU7a29WRtEOOTV2oWJe2OehNt/PRbKHm9qJXYx4bm71h2K0jCVGAwmX+
J/NmSA71BVLy3oMhSfEvh3C/7fGllfOkaIXTZ9K9fudAXHdoaQo1BiBhcX1EdchI
4jFibhKD8v+mMnt0tIPVnFdOJyISQn5FhyclOT2POUDx3NYAzk9YblhmEqoh7KQ4
EA89eg4z+nFjyQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:00:53 2025 by rpki-client